public static final class GenerateIdentityBindingAccessTokenRequest.Builder extends com.google.protobuf.GeneratedMessageV3.Builder<GenerateIdentityBindingAccessTokenRequest.Builder> implements GenerateIdentityBindingAccessTokenRequestOrBuilder
google.iam.credentials.v1.GenerateIdentityBindingAccessTokenRequest| Modifier and Type | Method and Description |
|---|---|
GenerateIdentityBindingAccessTokenRequest.Builder |
addAllScope(Iterable<String> values)
Code to identify the scopes to be included in the OAuth 2.0 access token.
|
GenerateIdentityBindingAccessTokenRequest.Builder |
addRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field,
Object value) |
GenerateIdentityBindingAccessTokenRequest.Builder |
addScope(String value)
Code to identify the scopes to be included in the OAuth 2.0 access token.
|
GenerateIdentityBindingAccessTokenRequest.Builder |
addScopeBytes(com.google.protobuf.ByteString value)
Code to identify the scopes to be included in the OAuth 2.0 access token.
|
GenerateIdentityBindingAccessTokenRequest |
build() |
GenerateIdentityBindingAccessTokenRequest |
buildPartial() |
GenerateIdentityBindingAccessTokenRequest.Builder |
clear() |
GenerateIdentityBindingAccessTokenRequest.Builder |
clearField(com.google.protobuf.Descriptors.FieldDescriptor field) |
GenerateIdentityBindingAccessTokenRequest.Builder |
clearJwt()
Required.
|
GenerateIdentityBindingAccessTokenRequest.Builder |
clearName()
The resource name of the service account for which the credentials
are requested, in the following format:
`projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`.
|
GenerateIdentityBindingAccessTokenRequest.Builder |
clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) |
GenerateIdentityBindingAccessTokenRequest.Builder |
clearScope()
Code to identify the scopes to be included in the OAuth 2.0 access token.
|
GenerateIdentityBindingAccessTokenRequest.Builder |
clone() |
GenerateIdentityBindingAccessTokenRequest |
getDefaultInstanceForType() |
static com.google.protobuf.Descriptors.Descriptor |
getDescriptor() |
com.google.protobuf.Descriptors.Descriptor |
getDescriptorForType() |
String |
getJwt()
Required.
|
com.google.protobuf.ByteString |
getJwtBytes()
Required.
|
String |
getName()
The resource name of the service account for which the credentials
are requested, in the following format:
`projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`.
|
com.google.protobuf.ByteString |
getNameBytes()
The resource name of the service account for which the credentials
are requested, in the following format:
`projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`.
|
String |
getScope(int index)
Code to identify the scopes to be included in the OAuth 2.0 access token.
|
com.google.protobuf.ByteString |
getScopeBytes(int index)
Code to identify the scopes to be included in the OAuth 2.0 access token.
|
int |
getScopeCount()
Code to identify the scopes to be included in the OAuth 2.0 access token.
|
com.google.protobuf.ProtocolStringList |
getScopeList()
Code to identify the scopes to be included in the OAuth 2.0 access token.
|
protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable |
internalGetFieldAccessorTable() |
boolean |
isInitialized() |
GenerateIdentityBindingAccessTokenRequest.Builder |
mergeFrom(com.google.protobuf.CodedInputStream input,
com.google.protobuf.ExtensionRegistryLite extensionRegistry) |
GenerateIdentityBindingAccessTokenRequest.Builder |
mergeFrom(GenerateIdentityBindingAccessTokenRequest other) |
GenerateIdentityBindingAccessTokenRequest.Builder |
mergeFrom(com.google.protobuf.Message other) |
GenerateIdentityBindingAccessTokenRequest.Builder |
mergeUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields) |
GenerateIdentityBindingAccessTokenRequest.Builder |
setField(com.google.protobuf.Descriptors.FieldDescriptor field,
Object value) |
GenerateIdentityBindingAccessTokenRequest.Builder |
setJwt(String value)
Required.
|
GenerateIdentityBindingAccessTokenRequest.Builder |
setJwtBytes(com.google.protobuf.ByteString value)
Required.
|
GenerateIdentityBindingAccessTokenRequest.Builder |
setName(String value)
The resource name of the service account for which the credentials
are requested, in the following format:
`projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`.
|
GenerateIdentityBindingAccessTokenRequest.Builder |
setNameBytes(com.google.protobuf.ByteString value)
The resource name of the service account for which the credentials
are requested, in the following format:
`projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`.
|
GenerateIdentityBindingAccessTokenRequest.Builder |
setRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field,
int index,
Object value) |
GenerateIdentityBindingAccessTokenRequest.Builder |
setScope(int index,
String value)
Code to identify the scopes to be included in the OAuth 2.0 access token.
|
GenerateIdentityBindingAccessTokenRequest.Builder |
setUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields) |
getAllFields, getField, getFieldBuilder, getOneofFieldDescriptor, getParentForChildren, getRepeatedField, getRepeatedFieldBuilder, getRepeatedFieldCount, getUnknownFields, hasField, hasOneof, internalGetMapField, internalGetMutableMapField, isClean, markClean, newBuilderForField, onBuilt, onChanged, setUnknownFieldsProto3findInitializationErrors, getInitializationErrorString, internalMergeFrom, mergeDelimitedFrom, mergeDelimitedFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, newUninitializedMessageException, toStringaddAll, addAll, mergeFrom, newUninitializedMessageExceptionequals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, waitpublic static final com.google.protobuf.Descriptors.Descriptor getDescriptor()
protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
internalGetFieldAccessorTable in class com.google.protobuf.GeneratedMessageV3.Builder<GenerateIdentityBindingAccessTokenRequest.Builder>public GenerateIdentityBindingAccessTokenRequest.Builder clear()
clear in interface com.google.protobuf.Message.Builderclear in interface com.google.protobuf.MessageLite.Builderclear in class com.google.protobuf.GeneratedMessageV3.Builder<GenerateIdentityBindingAccessTokenRequest.Builder>public com.google.protobuf.Descriptors.Descriptor getDescriptorForType()
getDescriptorForType in interface com.google.protobuf.Message.BuildergetDescriptorForType in interface com.google.protobuf.MessageOrBuildergetDescriptorForType in class com.google.protobuf.GeneratedMessageV3.Builder<GenerateIdentityBindingAccessTokenRequest.Builder>public GenerateIdentityBindingAccessTokenRequest getDefaultInstanceForType()
getDefaultInstanceForType in interface com.google.protobuf.MessageLiteOrBuildergetDefaultInstanceForType in interface com.google.protobuf.MessageOrBuilderpublic GenerateIdentityBindingAccessTokenRequest build()
build in interface com.google.protobuf.Message.Builderbuild in interface com.google.protobuf.MessageLite.Builderpublic GenerateIdentityBindingAccessTokenRequest buildPartial()
buildPartial in interface com.google.protobuf.Message.BuilderbuildPartial in interface com.google.protobuf.MessageLite.Builderpublic GenerateIdentityBindingAccessTokenRequest.Builder clone()
clone in interface com.google.protobuf.Message.Builderclone in interface com.google.protobuf.MessageLite.Builderclone in class com.google.protobuf.GeneratedMessageV3.Builder<GenerateIdentityBindingAccessTokenRequest.Builder>public GenerateIdentityBindingAccessTokenRequest.Builder setField(com.google.protobuf.Descriptors.FieldDescriptor field, Object value)
setField in interface com.google.protobuf.Message.BuildersetField in class com.google.protobuf.GeneratedMessageV3.Builder<GenerateIdentityBindingAccessTokenRequest.Builder>public GenerateIdentityBindingAccessTokenRequest.Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field)
clearField in interface com.google.protobuf.Message.BuilderclearField in class com.google.protobuf.GeneratedMessageV3.Builder<GenerateIdentityBindingAccessTokenRequest.Builder>public GenerateIdentityBindingAccessTokenRequest.Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof)
clearOneof in interface com.google.protobuf.Message.BuilderclearOneof in class com.google.protobuf.GeneratedMessageV3.Builder<GenerateIdentityBindingAccessTokenRequest.Builder>public GenerateIdentityBindingAccessTokenRequest.Builder setRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, int index, Object value)
setRepeatedField in interface com.google.protobuf.Message.BuildersetRepeatedField in class com.google.protobuf.GeneratedMessageV3.Builder<GenerateIdentityBindingAccessTokenRequest.Builder>public GenerateIdentityBindingAccessTokenRequest.Builder addRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, Object value)
addRepeatedField in interface com.google.protobuf.Message.BuilderaddRepeatedField in class com.google.protobuf.GeneratedMessageV3.Builder<GenerateIdentityBindingAccessTokenRequest.Builder>public GenerateIdentityBindingAccessTokenRequest.Builder mergeFrom(com.google.protobuf.Message other)
mergeFrom in interface com.google.protobuf.Message.BuildermergeFrom in class com.google.protobuf.AbstractMessage.Builder<GenerateIdentityBindingAccessTokenRequest.Builder>public GenerateIdentityBindingAccessTokenRequest.Builder mergeFrom(GenerateIdentityBindingAccessTokenRequest other)
public final boolean isInitialized()
isInitialized in interface com.google.protobuf.MessageLiteOrBuilderisInitialized in class com.google.protobuf.GeneratedMessageV3.Builder<GenerateIdentityBindingAccessTokenRequest.Builder>public GenerateIdentityBindingAccessTokenRequest.Builder mergeFrom(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException
mergeFrom in interface com.google.protobuf.Message.BuildermergeFrom in interface com.google.protobuf.MessageLite.BuildermergeFrom in class com.google.protobuf.AbstractMessage.Builder<GenerateIdentityBindingAccessTokenRequest.Builder>IOExceptionpublic String getName()
The resource name of the service account for which the credentials
are requested, in the following format:
`projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`.
string name = 1;getName in interface GenerateIdentityBindingAccessTokenRequestOrBuilderpublic com.google.protobuf.ByteString getNameBytes()
The resource name of the service account for which the credentials
are requested, in the following format:
`projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`.
string name = 1;getNameBytes in interface GenerateIdentityBindingAccessTokenRequestOrBuilderpublic GenerateIdentityBindingAccessTokenRequest.Builder setName(String value)
The resource name of the service account for which the credentials
are requested, in the following format:
`projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`.
string name = 1;public GenerateIdentityBindingAccessTokenRequest.Builder clearName()
The resource name of the service account for which the credentials
are requested, in the following format:
`projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`.
string name = 1;public GenerateIdentityBindingAccessTokenRequest.Builder setNameBytes(com.google.protobuf.ByteString value)
The resource name of the service account for which the credentials
are requested, in the following format:
`projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}`.
string name = 1;public com.google.protobuf.ProtocolStringList getScopeList()
Code to identify the scopes to be included in the OAuth 2.0 access token. See https://developers.google.com/identity/protocols/googlescopes for more information. At least one value required.
repeated string scope = 2;getScopeList in interface GenerateIdentityBindingAccessTokenRequestOrBuilderpublic int getScopeCount()
Code to identify the scopes to be included in the OAuth 2.0 access token. See https://developers.google.com/identity/protocols/googlescopes for more information. At least one value required.
repeated string scope = 2;getScopeCount in interface GenerateIdentityBindingAccessTokenRequestOrBuilderpublic String getScope(int index)
Code to identify the scopes to be included in the OAuth 2.0 access token. See https://developers.google.com/identity/protocols/googlescopes for more information. At least one value required.
repeated string scope = 2;getScope in interface GenerateIdentityBindingAccessTokenRequestOrBuilderpublic com.google.protobuf.ByteString getScopeBytes(int index)
Code to identify the scopes to be included in the OAuth 2.0 access token. See https://developers.google.com/identity/protocols/googlescopes for more information. At least one value required.
repeated string scope = 2;getScopeBytes in interface GenerateIdentityBindingAccessTokenRequestOrBuilderpublic GenerateIdentityBindingAccessTokenRequest.Builder setScope(int index, String value)
Code to identify the scopes to be included in the OAuth 2.0 access token. See https://developers.google.com/identity/protocols/googlescopes for more information. At least one value required.
repeated string scope = 2;public GenerateIdentityBindingAccessTokenRequest.Builder addScope(String value)
Code to identify the scopes to be included in the OAuth 2.0 access token. See https://developers.google.com/identity/protocols/googlescopes for more information. At least one value required.
repeated string scope = 2;public GenerateIdentityBindingAccessTokenRequest.Builder addAllScope(Iterable<String> values)
Code to identify the scopes to be included in the OAuth 2.0 access token. See https://developers.google.com/identity/protocols/googlescopes for more information. At least one value required.
repeated string scope = 2;public GenerateIdentityBindingAccessTokenRequest.Builder clearScope()
Code to identify the scopes to be included in the OAuth 2.0 access token. See https://developers.google.com/identity/protocols/googlescopes for more information. At least one value required.
repeated string scope = 2;public GenerateIdentityBindingAccessTokenRequest.Builder addScopeBytes(com.google.protobuf.ByteString value)
Code to identify the scopes to be included in the OAuth 2.0 access token. See https://developers.google.com/identity/protocols/googlescopes for more information. At least one value required.
repeated string scope = 2;public String getJwt()
Required. Input token.
Must be in JWT format according to
RFC7523 (https://tools.ietf.org/html/rfc7523)
and must have 'kid' field in the header.
Supported signing algorithms: RS256 (RS512, ES256, ES512 coming soon).
Mandatory payload fields (along the lines of RFC 7523, section 3):
- iss: issuer of the token. Must provide a discovery document at
$iss/.well-known/openid-configuration . The document needs to be
formatted according to section 4.2 of the OpenID Connect Discovery
1.0 specification.
- iat: Issue time in seconds since epoch. Must be in the past.
- exp: Expiration time in seconds since epoch. Must be less than 48 hours
after iat. We recommend to create tokens that last shorter than 6
hours to improve security unless business reasons mandate longer
expiration times. Shorter token lifetimes are generally more secure
since tokens that have been exfiltrated by attackers can be used for
a shorter time. you can configure the maximum lifetime of the
incoming token in the configuration of the mapper.
The resulting Google token will expire within an hour or at "exp",
whichever is earlier.
- sub: JWT subject, identity asserted in the JWT.
- aud: Configured in the mapper policy. By default the service account
email.
Claims from the incoming token can be transferred into the output token
accoding to the mapper configuration. The outgoing claim size is limited.
Outgoing claims size must be less than 4kB serialized as JSON without
whitespace.
Example header:
{
"alg": "RS256",
"kid": "92a4265e14ab04d4d228a48d10d4ca31610936f8"
}
Example payload:
{
"iss": "https://accounts.google.com",
"iat": 1517963104,
"exp": 1517966704,
"aud": "https://iamcredentials.googleapis.com/",
"sub": "113475438248934895348",
"my_claims": {
"additional_claim": "value"
}
}
string jwt = 3;getJwt in interface GenerateIdentityBindingAccessTokenRequestOrBuilderpublic com.google.protobuf.ByteString getJwtBytes()
Required. Input token.
Must be in JWT format according to
RFC7523 (https://tools.ietf.org/html/rfc7523)
and must have 'kid' field in the header.
Supported signing algorithms: RS256 (RS512, ES256, ES512 coming soon).
Mandatory payload fields (along the lines of RFC 7523, section 3):
- iss: issuer of the token. Must provide a discovery document at
$iss/.well-known/openid-configuration . The document needs to be
formatted according to section 4.2 of the OpenID Connect Discovery
1.0 specification.
- iat: Issue time in seconds since epoch. Must be in the past.
- exp: Expiration time in seconds since epoch. Must be less than 48 hours
after iat. We recommend to create tokens that last shorter than 6
hours to improve security unless business reasons mandate longer
expiration times. Shorter token lifetimes are generally more secure
since tokens that have been exfiltrated by attackers can be used for
a shorter time. you can configure the maximum lifetime of the
incoming token in the configuration of the mapper.
The resulting Google token will expire within an hour or at "exp",
whichever is earlier.
- sub: JWT subject, identity asserted in the JWT.
- aud: Configured in the mapper policy. By default the service account
email.
Claims from the incoming token can be transferred into the output token
accoding to the mapper configuration. The outgoing claim size is limited.
Outgoing claims size must be less than 4kB serialized as JSON without
whitespace.
Example header:
{
"alg": "RS256",
"kid": "92a4265e14ab04d4d228a48d10d4ca31610936f8"
}
Example payload:
{
"iss": "https://accounts.google.com",
"iat": 1517963104,
"exp": 1517966704,
"aud": "https://iamcredentials.googleapis.com/",
"sub": "113475438248934895348",
"my_claims": {
"additional_claim": "value"
}
}
string jwt = 3;getJwtBytes in interface GenerateIdentityBindingAccessTokenRequestOrBuilderpublic GenerateIdentityBindingAccessTokenRequest.Builder setJwt(String value)
Required. Input token.
Must be in JWT format according to
RFC7523 (https://tools.ietf.org/html/rfc7523)
and must have 'kid' field in the header.
Supported signing algorithms: RS256 (RS512, ES256, ES512 coming soon).
Mandatory payload fields (along the lines of RFC 7523, section 3):
- iss: issuer of the token. Must provide a discovery document at
$iss/.well-known/openid-configuration . The document needs to be
formatted according to section 4.2 of the OpenID Connect Discovery
1.0 specification.
- iat: Issue time in seconds since epoch. Must be in the past.
- exp: Expiration time in seconds since epoch. Must be less than 48 hours
after iat. We recommend to create tokens that last shorter than 6
hours to improve security unless business reasons mandate longer
expiration times. Shorter token lifetimes are generally more secure
since tokens that have been exfiltrated by attackers can be used for
a shorter time. you can configure the maximum lifetime of the
incoming token in the configuration of the mapper.
The resulting Google token will expire within an hour or at "exp",
whichever is earlier.
- sub: JWT subject, identity asserted in the JWT.
- aud: Configured in the mapper policy. By default the service account
email.
Claims from the incoming token can be transferred into the output token
accoding to the mapper configuration. The outgoing claim size is limited.
Outgoing claims size must be less than 4kB serialized as JSON without
whitespace.
Example header:
{
"alg": "RS256",
"kid": "92a4265e14ab04d4d228a48d10d4ca31610936f8"
}
Example payload:
{
"iss": "https://accounts.google.com",
"iat": 1517963104,
"exp": 1517966704,
"aud": "https://iamcredentials.googleapis.com/",
"sub": "113475438248934895348",
"my_claims": {
"additional_claim": "value"
}
}
string jwt = 3;public GenerateIdentityBindingAccessTokenRequest.Builder clearJwt()
Required. Input token.
Must be in JWT format according to
RFC7523 (https://tools.ietf.org/html/rfc7523)
and must have 'kid' field in the header.
Supported signing algorithms: RS256 (RS512, ES256, ES512 coming soon).
Mandatory payload fields (along the lines of RFC 7523, section 3):
- iss: issuer of the token. Must provide a discovery document at
$iss/.well-known/openid-configuration . The document needs to be
formatted according to section 4.2 of the OpenID Connect Discovery
1.0 specification.
- iat: Issue time in seconds since epoch. Must be in the past.
- exp: Expiration time in seconds since epoch. Must be less than 48 hours
after iat. We recommend to create tokens that last shorter than 6
hours to improve security unless business reasons mandate longer
expiration times. Shorter token lifetimes are generally more secure
since tokens that have been exfiltrated by attackers can be used for
a shorter time. you can configure the maximum lifetime of the
incoming token in the configuration of the mapper.
The resulting Google token will expire within an hour or at "exp",
whichever is earlier.
- sub: JWT subject, identity asserted in the JWT.
- aud: Configured in the mapper policy. By default the service account
email.
Claims from the incoming token can be transferred into the output token
accoding to the mapper configuration. The outgoing claim size is limited.
Outgoing claims size must be less than 4kB serialized as JSON without
whitespace.
Example header:
{
"alg": "RS256",
"kid": "92a4265e14ab04d4d228a48d10d4ca31610936f8"
}
Example payload:
{
"iss": "https://accounts.google.com",
"iat": 1517963104,
"exp": 1517966704,
"aud": "https://iamcredentials.googleapis.com/",
"sub": "113475438248934895348",
"my_claims": {
"additional_claim": "value"
}
}
string jwt = 3;public GenerateIdentityBindingAccessTokenRequest.Builder setJwtBytes(com.google.protobuf.ByteString value)
Required. Input token.
Must be in JWT format according to
RFC7523 (https://tools.ietf.org/html/rfc7523)
and must have 'kid' field in the header.
Supported signing algorithms: RS256 (RS512, ES256, ES512 coming soon).
Mandatory payload fields (along the lines of RFC 7523, section 3):
- iss: issuer of the token. Must provide a discovery document at
$iss/.well-known/openid-configuration . The document needs to be
formatted according to section 4.2 of the OpenID Connect Discovery
1.0 specification.
- iat: Issue time in seconds since epoch. Must be in the past.
- exp: Expiration time in seconds since epoch. Must be less than 48 hours
after iat. We recommend to create tokens that last shorter than 6
hours to improve security unless business reasons mandate longer
expiration times. Shorter token lifetimes are generally more secure
since tokens that have been exfiltrated by attackers can be used for
a shorter time. you can configure the maximum lifetime of the
incoming token in the configuration of the mapper.
The resulting Google token will expire within an hour or at "exp",
whichever is earlier.
- sub: JWT subject, identity asserted in the JWT.
- aud: Configured in the mapper policy. By default the service account
email.
Claims from the incoming token can be transferred into the output token
accoding to the mapper configuration. The outgoing claim size is limited.
Outgoing claims size must be less than 4kB serialized as JSON without
whitespace.
Example header:
{
"alg": "RS256",
"kid": "92a4265e14ab04d4d228a48d10d4ca31610936f8"
}
Example payload:
{
"iss": "https://accounts.google.com",
"iat": 1517963104,
"exp": 1517966704,
"aud": "https://iamcredentials.googleapis.com/",
"sub": "113475438248934895348",
"my_claims": {
"additional_claim": "value"
}
}
string jwt = 3;public final GenerateIdentityBindingAccessTokenRequest.Builder setUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields)
setUnknownFields in interface com.google.protobuf.Message.BuildersetUnknownFields in class com.google.protobuf.GeneratedMessageV3.Builder<GenerateIdentityBindingAccessTokenRequest.Builder>public final GenerateIdentityBindingAccessTokenRequest.Builder mergeUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields)
mergeUnknownFields in interface com.google.protobuf.Message.BuildermergeUnknownFields in class com.google.protobuf.GeneratedMessageV3.Builder<GenerateIdentityBindingAccessTokenRequest.Builder>Copyright © 2019 Google LLC. All rights reserved.